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1. (Currently Amended) An apparatus for creating an audit trail for an application 
program, wherein the application program defin es one or more bu s ines s compon e nt s and is 
executable on an application server, the apparatus comprising: 

means for selecting: 

the— business components to be audited from the— one or more business 
components , wherein 

the one or more business components are defined by the application 
program being audited ; and 

one or more operations to be audited; 

wherein the means for selecting the business components to be audited and the 
operations to be audited is included in the application program being 
audited . 

2. (Original) The apparatus of claim 1, wherein the application program 
further comprises: 

means for detecting when the selected operations are performed. 

3. (Original) The apparatus of claim 2, wherein the application program 
further comprises: 

means for generating an audit transaction record regarding the business component when 
the selected operations are detected. 

4. (Original) The apparatus of claim 1, wherein the operations include at least one 
of: update, add, copy, and delete. 

5. (Original) The apparatus of claim 1, further comprising means for restricting 
access to the audit trail by at least one of: an employee identifier, an employment position, and 
an area of responsibility. 
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6. (Original) The apparatus of claim 3, further comprising means for storing the 
audit transaction record in an external database. 

7. (Original) The apparatus of claim 3, further comprising means for storing the 
audit transaction record in a file. 

8. (Original) The apparatus of claim 7, further comprising means for importing the 
audit transaction record stored in the file to a database. 

9. (Original) The apparatus of claim 3, wherein the audit transaction record includes 
at least one of: an identifier for the entity that accessed the business component, the operation 
that was performed on the business component, when the operation was performed, and how the 
value of at least a portion of the business component was changed. 

10. (Original) The apparatus of claim 3, further comprising means for querying one 
or more of the audit transaction records. 

11. (Original) The apparatus of claim 2, further comprising means for prompting the 
user to enter a comment when the selected operations are detected. 

12. (Original) The apparatus of claim 1, wherein the one or more business 
components comprise one or more fields, and further comprising: 

means for selecting the one or more fields to be audited; and 

means for generating an audit transaction record when one of the selected operations on 
one of the selected fields is detected. 

13. (Original) The apparatus of claim 12, further comprising means for restoring the 
one or more of the fields to a previous state. 

14. (Currently Amended) A system for creating an audit trail in an information 
system, comprising: 

an application program comprising: 
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at least one business component, wherein each business component includes one 

or more fields; 
a user interface operable to allow a user to select: 

one or more of the fields, and 

one or more operations to be audited on one or more of the selected fields; 
a set of instructions operable to detect when the selected operations are performed 

by the application program on the selected fields; and 
a set of instructions operable to generate an audit transaction record regarding one 

or more of the selected fields when the selected operations by the 

application program are detected. 

15. (Original) The system of claim 14, wherein the operations on the one or more 
fields to be audited include at least one of: update, add, copy, and delete. 

16. (Original) The system of claim 14, wherein the user interface is further operable 
to allow the user to restrict access to the audit trail by at least one of: an employee identifier, an 
employment position, and an area of responsibility. 

17. (Original) The system of claim 14, wherein the audit transaction record is stored 
in a database. 

18. (Original) The system of claim 14, wherein the audit transaction record is stored 
in a file. 

19. (Original) The system of claim 18, further comprising instructions operable to 
import the audit transaction record stored in the file to a database. 

20. (Original) The system of claim 14, wherein the audit transaction record includes 
at least one of: an identifier for the entity that accessed the field, the operation that was 
performed, when the operation was performed, and a previous value of the field, and a current 
value of the field. 
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21. (Original) The system of claim 14, further comprising instructions to allow the 
user to query one or more of the audit transaction records. 

22. (Original) The system of claim 14, further comprising instructions to allow the 
user to restore one or more of the selected fields to a previous value. 

23. (Original) The system of claim 14, further comprising instructions to prompt the 
user to enter a description of the operation when the selected operations are detected. 

24. (Currently Amended) A method for creating an audit trail in an information 
system, the method comprising: 

performing audit trail functions in an application program being audited including: 
generating a list of business components included in the application program; 
presenting the list of business components to a user; 

allowing the user to select one or more of the business components to be audited; 
presenting a list of operations that can be performed on the business components 
to the user; 

allowing the user to select one or more of the operations to be audited for the 
selected business components a 

wherein the generating the list of business components, the presenting the list 
of business components, the allowing the user to select one or more of 
the business components, the presenting a list of operations, and the 
allowing the user to select one or more of the operations are 
performed by the application program being audited . 

25. (Original) The method of claim 24, wherein the operations include at least one 
of: update, add, copy, and delete. 

26. (Original) The method of claim 24, further comprising restricting access to the 
audit trail by at least one of: an employee identifier, an employment position, and an area 
of responsibility. 
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27. (Original) The method of claim 24, further comprising: 

detecting when the selected operations are performed on one of the selected business 
components; and 

generating an audit transaction record when the selected operations are detected. 

28. (Original) The method of claim 27, further comprising storing the audit 
transaction record in a database. 

29. (Original) The method of claim 27, further comprising storing the audit 
transaction record in a file. 

30. (Original) The method of claim 29, further comprising importing the audit 
transaction record stored in the file to a database. 

31. (Original) The method of claim 27, wherein the audit transaction record includes 
at least one of: an identifier for the entity that accessed the business component, the operation 
that was performed on the business component, when the operation was performed, and how the 
value of at least a portion of the business component was changed. 

32. (Original) The method of claim 27, further comprising querying one or more of 
the audit transaction records. 

33. (Original) The method of claim 27, further comprising prompting the user to 
enter a description of the operation when the selected operations are detected. 

34. (Original) The method of claim 24, wherein the one or more business 
components comprise one or more fields, and further comprising: 

selecting the fields to be audited; and 

generating an audit transaction record when the selected operations on the selected fields 
are detected. 
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35. (Original) The method of claim 34, further comprising restoring one or more of 
the selected fields to a previous value. 

36. (Original) A computer program product comprising: 
instructions for implementing the method of claim 24. 

37. (Original) A data signal comprising: 
instructions for implementing the method of claim 24. 
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